[System.File] "%SystemRoot%\Prefetch\* [*]" "%SystemRoot%\system32\dllcache\* [*]" "%SystemDrive%\ADFS\bin\* [*]" "%SystemDrive%\ADFS\Samples\* [*]" "%SystemRoot%\system32\$ [Federation.AdminConsole.Resources.dll]" "%SystemRoot%\system32\inetsrv\ASP Compiled Templates\* [*]" "%SystemRoot%\system32\inetsrv\History\* [*]" "%SystemRoot%\system32\inetsrv\MetaBack\* [*]" "%SystemRoot%\system32\$ [srmreports.resources.dll]" "%SystemRoot%\system32\$ [srmgui.resources.dll]" "%CSIDL_COMMON_PROGRAMS% [XPS Viewer EP.lnk]" "%CSIDL_COMMON_DESKTOPDIRECTORY% [XPS Viewer EP.lnk]" [System.Registry] [System.GAC] "[bdatunepia,*]" "[ContextTagger,*]" "[ehCIR,*]" "[EhCM,*]" "[ehcommon,*]" "[ehepg,*]" "[ehepgdat,*]" "[ehExtCOM,*]" "[ehiExtCOM,*]" "[ehiExtens,*]" "[ehiMsgr,*]" "[ehiPlay,*]" "[ehiProxy,*]" "[ehiReplay,*]" "[ehiuserxp,*]" "[ehiVidCtl,*]" "[ehiwmp,*]" "[ehiWUapi,*]" "[ehRecObj,*]" "[KbcResources,*]" "[Interop.TIPComponents,*]" "[Interop.SoftKeyboardInterface,*]" "[Microsoft.MediaCenter,*]" "[SonicMCEBurnEngine,*]" "[SKLibrary,*]" "[SoftKeyboardLogic,*]" "[System.Web.Security.SingleSignOn,*]" "[System.Web.Security.SingleSignOn.resources,*]" "[System.Web.Security.SingleSignOn.ClaimTransforms,*]" "[TIPLibrary,*]" [User.File] "%UserProfile%\%HypertrmProfile_DIR% [AT&T Mail.ht]" "%UserProfile%\%HypertrmProfile_DIR% [CompuServe.ht]" "%UserProfile%\%HypertrmProfile_DIR% [HyperTerminal BBS.ht]" "%UserProfile%\%HypertrmProfile_DIR% [MCI Mail.ht]" "%UserProfile%\%HypertrmProfile_DIR% [Microsoft BBS.ht]" "%UserProfile% [sti_trace.log]" "%CSIDL_APPDATA%\microsoft\clr security config\v1.1.4322 [security.config]" "%CSIDL_APPDATA%\microsoft\clr security config\v1.1.4322 [security.config.cch]" "%CSIDL_APPDATA%\Microsoft\Internet Explorer [brndlog.bak]" "%CSIDL_APPDATA%\Microsoft\Internet Explorer [brndlog.txt]" "%CSIDL_LOCAL_APPDATA%\applicationhistory [rundll32.exe.a18d08cb.ini]" "%CSIDL_LOCAL_APPDATA%\microsoft\internet explorer [brndlog.bak]" "%CSIDL_LOCAL_APPDATA%\microsoft\internet explorer [brndlog.txt]" "%CSIDL_LOCAL_APPDATA%\microsoft\media player [currentdatabase_59r.wmdb]" "%CSIDL_LOCAL_APPDATA%\Microsoft\Windows Media\9.0 [wmsdkns.dtd]" "%CSIDL_LOCAL_APPDATA%\Microsoft\Windows Media\9.0 [wmsdkns.xml]" "%CSIDL_LOCAL_APPDATA%\microsoft\windows media\10.0 [wmsdkns.dtd]" "%CSIDL_LOCAL_APPDATA%\microsoft\windows media\10.0 [wmsdkns.xml]" "%CSIDL_APPDATA% [desktop.ini]" "%CSIDL_HISTORY%\History.IE5 [desktop.ini]" "%CSIDL_HISTORY% [desktop.ini]" "%UserProfile%\Local Settings [desktop.ini]" "%CSIDL_SENDTO% [Compressed (zipped) Folder.ZFSendToTarget]" "%CSIDL_SENDTO% [Desktop (create shortcut).DeskLink]" "%CSIDL_SENDTO% [desktop.ini]" "%CSIDL_SENDTO% [Mail Recipient.MAPIMail]" "%CSIDL_PROGRAMS%\Accessories\Accessibility [desktop.ini]" "%CSIDL_PROGRAMS%\Accessories\Accessibility [Magnifier.lnk]" "%CSIDL_PROGRAMS%\Accessories\Accessibility [Narrator.lnk]" "%CSIDL_PROGRAMS%\Accessories\Accessibility [On-Screen Keyboard.lnk]" "%CSIDL_PROGRAMS%\Accessories\Accessibility [Utility Manager.lnk]" "%CSIDL_PROGRAMS%\Accessories\Entertainment [desktop.ini]" "%CSIDL_PROGRAMS%\Accessories\Entertainment [Windows Media Player.lnk]" "%CSIDL_PROGRAMS%\Accessories [Command Prompt.lnk]" "%CSIDL_PROGRAMS%\Accessories [desktop.ini]" "%CSIDL_PROGRAMS%\Accessories [Notepad.lnk]" "%CSIDL_PROGRAMS%\Accessories [Program Compatibility Wizard.lnk]" "%CSIDL_PROGRAMS%\Accessories [Synchronize.lnk]" "%CSIDL_PROGRAMS%\Accessories [Tour Windows XP.lnk]" "%CSIDL_PROGRAMS%\Accessories [Windows Explorer.lnk]" "%CSIDL_PROGRAMS%\Startup [desktop.ini]" "%CSIDL_PROGRAMS% [desktop.ini]" "%CSIDL_PROGRAMS% [Remote Assistance.lnk]" "%CSIDL_PROGRAMS% [Windows Media Player.lnk]" "%CSIDL_PROGRAMS% [Windows Movie Maker.lnk]" "%CSIDL_STARTMENU% [desktop.ini]" "%CSIDL_STARTUP% [desktop.ini]" "%CSIDL_TEMPLATES% [amipro.sam]" "%CSIDL_TEMPLATES% [excel.xls]" "%CSIDL_TEMPLATES% [excel4.xls]" "%CSIDL_TEMPLATES% [lotus.wk4]" "%CSIDL_TEMPLATES% [powerpnt.ppt]" "%CSIDL_TEMPLATES% [presenta.shw]" "%CSIDL_TEMPLATES% [quattro.wb2]" "%CSIDL_TEMPLATES% [sndrec.wav]" "%CSIDL_TEMPLATES% [winword.doc]" "%CSIDL_TEMPLATES% [winword2.doc]" "%CSIDL_TEMPLATES% [wordpfct.wpd]" "%CSIDL_TEMPLATES% [wordpfct.wpg]" "%CSIDL_APPDATA%\Microsoft\Internet Explorer\Quick Launch [XPS Viewer EP.lnk]"